Borrowing it
Nothing to install: this file belongs to xiarongwen/boss-auto-job. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/xiarongwen/boss-auto-job/main/.cursorrulesgit clone --depth 1 https://github.com/xiarongwen/boss-auto-jobWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/xiarongwen/boss-auto-job/cursorrules)<a href="https://agentmods.dev/rules/xiarongwen/boss-auto-job/cursorrules"><img src="https://agentmods.dev/badge/rules/xiarongwen/boss-auto-job/cursorrules.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00989 | $0.00989 |
| Opus 5 | $0.00495 | $0.00495 |
| Sonnet 5 | $0.00198 | $0.00198 |
| Haiku 4.5 | $0.00099 | $0.00099 |
Grade A, and why
cursorrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Boss Auto Job — Skill Instructions
在 BOSS 直聘上自动搜索职位、匹配简历、生成打招呼语、发送消息。
何时使用
当用户提到以下关键词时激活此技能:
- 找工作、求职、投简历、看机会
- BOSS直聘、BOSS、招聘
- 搜索职位、发消息、打招呼
- 简历匹配
前置条件
pip install "camoufox[geoip]" && camoufox fetch
简历文件:~/.hermes/credentials/resume.txt
工具
项目路径下有一个 boss CLI,支持以下命令:
搜索职位
./boss search "关键词" --city 深圳 --area 南山 --pages 2
--city: 城市名(北京/上海/深圳/杭州/成都/广州/南京/武汉/西安/苏州/天津)或城市代码--area: 区域过滤,如 南山、海淀、朝阳--pages: 页数(默认1,最多3)
搜索 + 简历匹配
./boss search "AI前端" --city 深圳 --match --top 5
搜索 + 匹配 + 自动发送
./boss search "Agent应用开发" --city 深圳 --match --send --top 3
发送消息
./boss send <job_id> "你好,我对这个职位很感兴趣"
其他
./boss optimize <job_id> <resume.pdf> # 根据JD优化简历(支持PDF/Word)
./boss resume # 查看简历
./boss cities # 查看城市代码
工作流程
当用户说"帮我找XX方面的工作"时:
- 理解需求 — 确认关键词、城市、区域
- 搜索 —
./boss search "关键词" --city 城市 --area 区域 - 匹配 — 如果用户有简历,加
--match --top N - 展示结果 — 列出匹配度最高的职位,让用户选择
- 生成招呼语 — Agent 根据 JD + 简历内容直接生成个性化招呼语(见下方规则)
- 确认发送 — 让用户确认后再发(不要自动发!)
- 发送 —
./boss send <job_id> "招呼语"
招呼语生成规则
不使用固定模板。 Agent 根据每个职位的 JD 和候选人简历直接生成个性化招呼语。
- 从 JD 提取 2-3 个关键需求,与简历中的对应经验/技能匹配
- 语气自然真诚,像在和招聘者对话,不要像在念简历
- 不要以"您好"千篇一律开头,用更自然的方式切入
- 体现对该具体公司/岗位的兴趣(从 JD 中提取线索)
- 总长度 80-150 个中文字符
- 结尾礼貌地表达沟通意愿
- 每条消息都应该是独特的,体现这个 JD 和这份简历的特定匹配点
安全规则(必须遵守)
| 情况 | 行动 |
|---|---|
| Code 0 | 正常处理 |
| Code 37 | 自动生成 zp_stoken,重试 1 次 |
| Code 36 | 立即停止,告诉用户"请在浏览器中打开 zhipin.com 完成验证后告诉我" |
| Code 32 | 立即停止,告诉用户"请在浏览器中完成验证,并手动发一条消息后告诉我" |
| Code 1006 | 等待 10 秒重试 |
绝不重试 Code 36/32,否则会升级封禁。
频率限制
- 搜索间隔:3-5 秒
- 发送间隔:5 秒
- 单次搜索:最多 3 页
- 单次发送:最多 5 条
- 每日发送:不超过 20 条
技术文档
REVERSE_ENGINEERING.md— BOSS 风控逆向分析BYPASS_SOLUTION.md— 绕过方案SKILL.md— 完整技术文档
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 110 lines · 989 tokens per session scan A 65005a9ea252
cursorrules is a cursor rule published in the GitHub repository xiarongwen/boss-auto-job (21 stars, last pushed 4mo ago), licensed MIT. It adds 989 tokens to every session, about $0.0049 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
ponytail
Ponytail, lazy senior dev mode. Always pick the simplest solution that works.
angular-20
This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.
dev-standard
Apache Superset development standards and guidelines for Cursor IDE.
cli-error-handling
CLI command error handling patterns.
prefer-assertions-over-defensive-checks
Prefer assertions over defensive checks when data is guaranteed to be valid.
prefer-direct-imports-over-module-mocks
Prefer extracting a testable core over vi.mock / vi.resetModules when unit tests need to reach production logic entangled with config, env, or singletons.